Ultimate Reviews
Rustaurius · 3 CVEs
CVE-2026-24634
MEDIUM
WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability
Jan 23, 2026
CVE-2025-49266
HIGH
WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability
Jun 17, 2025
CVE-2020-36726
CRITICAL
Ultimate Reviews < 2.1.33 - PHP Object Injection
Jun 7, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-24634 | WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability | MEDIUM | 0.24% | Jan 23, 2026 |
| CVE-2025-49266 | WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.34% | Jun 17, 2025 |
| CVE-2020-36726 | Ultimate Reviews < 2.1.33 - PHP Object Injection | CRITICAL | 1.55% | Jun 7, 2023 |
Showing 1 to 3 of 3 CVEs